ConMon Engineer

Job Summary

Zachary Piper Solutions is seeking a ConMon Engineer to support a Cyber Security company working closely with engineering, SRE, compliance, and federal clients. This position is fully remote with a 20% travel requirement. This is a full-time Contract to hire opportunity supporting continuous monitoring and vulnerability management operations.

The ConMon Engineer is responsible for vulnerability management, monitoring compliance, and security activities across Cloud-based systems.

Responsibilities of the ConMon Engineer

• Manage the Plan of Action and Milestones (POA&M) lifecycle, including creating, tracking, justifying risks, and deviations requests with federal stakeholders.
• Collect, organize, and maintain security evidence for monthly monitoring and assessment activities.
• Maintain accurate system inventories to ensure proper scanning scope.
• Analyze scan results and prepare supporting risk assessments for deviations.
• Translate technicalities into clear language for federal clients and present monthly updates.

Qualifications of the ConMon Engineer

• 3 – 5 years of experience in vulnerability management, security operations, or continuous monitoring.
• Vulnerability management experience across OS, networks, databases, containers, and web applications.
• Experience with using at least two major cloud platforms (AWS, Azure, GCP) to support vulnerability programs.
• Experience working with compliance frameworks such as FedRAMP, HITRUST, or PCI.
• Certifications (admin level) in AWS, Azure, or GCP.

Compensation for the ConMon Engineer

Salary range: $115,000-$135,000 depending on experience. Full Benefits Package: Cigna Medical, Dental, Vision, 401k, PTO, Sick Leave as required by law, and Holidays.

Key skills/competency

• Vulnerability Management
• Continuous Monitoring
• Security Operations
• Cloud Security (AWS, Azure, GCP)
• FedRAMP Compliance
• HITRUST Compliance
• PCI Compliance
• Risk Assessment
• System Inventory Management
• Security Evidence Collection